Libreswan is an open-source Internet Protocol Security (IPsec) implementation that provides cryptographic tunneling for virtual private networks and site-to-site connectivity, occupying a focused but strategically important role in network infrastructure and embedded security deployments. The vendor's vulnerability profile, despite a modest disclosure volume, centers consistently on a single product and recurs through weakness classes rooted in protocol state handling and resource management: NULL-pointer dereferences, improper input validation, uncontrolled resource consumption, and race conditions in concurrent execution. These patterns reflect the parsing, cryptographic negotiation, and daemon-level synchronization complexity inherent to a userspace IPsec stack operating across heterogeneous peer implementations. Defenders should track this vendor's advisories closely because IPsec flaws can affect VPN availability and tunnel integrity; current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Libreswan Project over time
Of all the CVEs published by Libreswan Project as a CNA, 80.0% affect products that Libreswan Project develops as a vendor.
Of all the CVEs published that affect products developed by Libreswan Project, 16.7% are self-published by Libreswan Project as a CNA.
Signals from CVEs in this vendor scope (24 CVEs).
24 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-12413HIGH An invalidly formatted IKEv2 fragment causes the Libreswan pluto daemon to crash and restart. Continued exploitation would cause a denial of service. The function reassemble_v2_inc | Jul 2, 2026 | 7.5 | 36 | NO | NO |
CVE-2026-50721MEDIUM Libreswan, via the function RSA_authenticate_hash_signature_raw_rsa(), did not correctly verify the length of the authentication hash when the SIG payload of an IKEv1 packet was en | Jul 2, 2026 | 5.9 | 32 | NO | NO |
CVE-2026-50722MEDIUM Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKEv2 AUTH payload was encoded u | Jul 2, 2026 | 5.9 | 32 | NO | NO |
CVE-2013-7283HIGH Race condition in the libreswan.spec files for Red Hat Enterprise Linux (RHEL) and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tm | Jan 9, 2014 | 9.3 | 28 | NO | NO |
CVE-2022-23094HIGH Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKEv1 packet because pluto/ikev1.c wrongly | Jan 15, 2022 | 7.5 | 27 | NO | NO |
CVE-2016-3071HIGH Libreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an IKEv2 aes_xcbc transform. | Apr 18, 2016 | 7.5 | 27 | NO | NO |
CVE-2019-12312HIGH In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, follo | May 24, 2019 | 7.5 | 25 | NO | NO |
CVE-2016-5391HIGH libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart). | Jun 13, 2017 | 7.5 | 25 | NO | NO |
CVE-2023-2295HIGH A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the re | May 17, 2023 | 7.5 | 24 | NO | NO |
CVE-2016-5361HIGH programs/pluto/ikev1.c in libreswan before 3.17 retransmits in initial-responder states, which allows remote attackers to cause a denial of service (traffic amplification) via a sp | Jun 16, 2016 | 7.5 | 24 | NO | NO |
Signals from CVEs in this vendor scope (24 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Libreswan Project.
Media articles that mention a CVE ID that affects a product developed by Libreswan Project — matched by CVE ID, not by vendor name.